disallow to rewrite vendor tree directly

[goatherd]

There may be a need to fall back to such brute force approach. It however should not be encouraged.